The short version
wdyt pages are public by link, not private. Anyone who receives or discovers a review URL may be able to view the uploaded HTML, names, comments, drawings, and versions and, while the page is active, collaborate on it.
Do not upload confidential information, credentials, regulated data, or personal information you are not authorized to share.
wdyt is operated by roundtableml, Inc. (“wdyt,” “we,” “us,” or “our”). This Policy applies to wdyt.page, its review pages, accounts, APIs, agent integrations, and related services (the “Service”). It does not replace the privacy notices of Google, GitHub, Clerk, or other services you choose to use with wdyt.
For account and platform administration data, roundtableml, Inc. generally acts as the controller or business. If an organization uses wdyt to process personal information in its content, that organization may be the controller and wdyt may act as its processor or service provider. Users remain responsible for providing any notices and obtaining any rights, permissions, or consents required for the content they upload.
Information we handle
Information you and your collaborators provide
- Account information: name, email address, profile image, Clerk user identifier, and the login provider you select. We do not receive your Google or GitHub password.
- Pro launch list: the email you submit or, when signed in, your account email; your account and selected-workspace identifiers when applicable; where you requested the notification; and signup timestamps.
- Page and review content: uploaded HTML, titles, versions, labels, comments, replies, drawings, editable-field values, review signals, author names, and related timestamps and page locations.
- Sharing and ownership data: review identifiers, a hashed link capability, an encrypted creator copy used for “My pages,” and a temporary claim token for anonymous creation.
- Communications: messages and attachments you send when requesting support, reporting abuse, making a privacy request, or sending feedback.
Information collected automatically
When you use the Service, wdyt and its infrastructure providers may process IP address, browser and device type, operating system, requested URL, referring page, timestamps, error information, and security or diagnostic events. We use this information to deliver the Service, prevent abuse, troubleshoot failures, and maintain security.
Cookies and similar storage
wdyt currently uses technologies needed to operate the Service:
- Clerk authentication and security cookies that maintain sessions and protect sign-in.
- A 24-hour, HTTP-only claim cookie that can associate an anonymously created page with your account when you sign in.
- Limited browser storage used for interface preferences or an unverified display name.
wdyt does not currently use advertising cookies, cross-site behavioral advertising, or third-party analytics on wdyt.page. If we add optional analytics or marketing technologies, we will update this Policy and request consent where required.
Information from other sources
If you sign in with Google or GitHub, we receive the profile information that provider and your settings permit it to share through Clerk. We may also receive security, availability, or diagnostic information from our hosting and authentication providers.
How and why we use information
| Purpose | Examples | Legal basis where required |
|---|---|---|
| Provide the Service | Create and render pages, preserve versions, show comments and drawings, authenticate accounts, and associate pages with their creators. | Performance of our contract with you. |
| Protect and operate wdyt | Prevent abuse, investigate incidents, rate-limit requests, debug errors, maintain availability, and enforce our Terms. | Our legitimate interests in a safe and reliable service; and legal obligations where applicable. |
| Communicate | Respond to support, privacy, copyright, and illegal-content reports; send essential account or policy notices. | Contract, legitimate interests, legal obligations, or consent depending on the message. |
| Send the requested launch notification | Email people who explicitly ask to know when wdyt Pro becomes available. | Your consent. You can withdraw it at any time. |
| Improve the product | Understand aggregate reliability and feature use, fix problems, and develop new functionality. | Our legitimate interests, using minimized or de-identified information where practical. |
| Legal and corporate purposes | Comply with valid legal process, establish or defend claims, and support a merger, financing, acquisition, or sale. | Legal obligations and our legitimate interests. |
We do not use uploaded page content to train general-purpose AI models. We do not make decisions about you that produce legal or similarly significant effects solely through automated processing.
Who can see a wdyt page
A review URL is a bearer capability: possession of the URL grants access. The page is unlisted, but it is not access-controlled or confidential. People and agents with the link may be able to view, download, comment, draw, rename, and upload versions. Their names and contributions are visible to other people with the link.
You choose who receives the link. Avoid posting it publicly unless you intend the content to be public. Removing a link from a message does not revoke copies already shared or downloaded.
International transfers
wdyt and its providers may process information in the United States and other countries that may have different data-protection rules than your home country. Where applicable law requires a transfer mechanism, we rely on measures such as adequacy decisions, the EU–U.S. Data Privacy Framework for participating providers, Standard Contractual Clauses, and contractual and technical safeguards appropriate to the transfer.
Retention and deletion
- Active free pages: available through their public-by-link URL for 14 days from creation.
- Expired pages: retained in an inaccessible archive for up to 90 additional days, then scheduled for permanent deletion. The exact deletion may occur shortly after the deadline when the scheduled cleanup runs.
- Anonymous claim cookie: expires after 24 hours.
- Account information: kept while your account is active and then deleted or de-identified when no longer needed, subject to security, dispute, and legal-retention needs.
- Pro launch list: kept until we send the requested launch update or you ask us to remove it, then deleted within 30 days unless a limited record is required to honor your request or comply with law.
- Security and diagnostic records: retained for a limited period appropriate to security, debugging, and legal needs; provider retention can vary by service and plan.
- Legal records: a limited record of requests, removals, disputes, or transactions may be kept as necessary to comply with law, prevent repeated abuse, or establish and defend legal claims.
A signed-in creator can permanently delete a page from “My pages.” You may also contact us to request account or personal-data deletion. Deletion cannot remove copies other participants already downloaded, and limited data may remain in isolated backups until overwritten through the ordinary backup cycle.
Security
We use safeguards designed for the nature of the Service, including private object storage, hashed review capabilities in the database, encrypted creator access links, HTTP-only cookies, sandboxed rendering, access controls for infrastructure, automated abuse checks, and request-size limits. No internet service is perfectly secure. wdyt links themselves are access credentials, so protect them accordingly and never upload secrets or information requiring confidential or regulated storage.
Your privacy rights
Depending on where you live, you may have rights to know or access personal information, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent, or appeal a refused request. You may also have the right to lodge a complaint with your local data-protection authority. California residents may additionally have applicable rights to know, correct, delete, limit, opt out, and receive equal service; wdyt does not sell or share personal information for targeted advertising.
Send requests to naveh@jyper.ai. Tell us the email associated with your account and, if the request concerns a page, its exact wdyt URL. We may ask for information needed to verify identity, authority, and control of the page. Authorized agents may submit requests where permitted by law. We will respond within the period required by applicable law.
Children
The Service is for business and professional collaboration and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a minor has used wdyt or appears in uploaded content, contact us so we can investigate and delete information where appropriate.
Changes to this Policy
We may update this Policy as the Service or law changes. We will post the revised version here and change the date above. If a change materially affects how we use personal information, we will provide additional notice where required.
Contact
roundtableml, Inc.
Privacy contact: naveh@jyper.ai
Service: https://www.wdyt.page
For content or safety reports, include the exact review URL and enough information for us to identify and assess the material.